3
ܓi6 @ sV d dl Z d dlmZ d dlmZ d dlmZ d dlmZm Z m
Z
G dd dee Z dS ) N)Any)request)URLError)PluginIndependentPlugin PluginOptc @ s e Zd ZdZdZd ZeddddgZdZd Z d
Z
d Z d d
Z dd Z
dd ZedddZeedddZdd Zeeeddd Zd S ) GCPzGoogle Cloud Platformgcpvirtzkeep-piiFzyStop the plugin from removing PIIs like project name or organization ID from the metadata retrieved from Metadata server.)defaultZdescz(/sys/devices/virtual/dmi/id/product_namezBhttp://metadata.google.internal/computeMetadata/v1/?recursive=truez[--REDACTED--]Nc C s@ y&t | jdd}d|j kS Q R X W n tk
r: dS X dS )zo
Checks if this plugin should be executed based on the presence of
GCE entry in sysfs.
zutf-8)encodingzGoogle Compute EngineNF)open PRODUCT_PATHreadOSError)selfZsys_file r /usr/lib/python3.6/gcp.py
check_enabled$ s
zGCP.check_enabledc C s$ | j ddgd | jddgd dS )z
Collect the following info:
* `gcloud auth list` output
* Any google services output from journal
zgcloud auth listr )tagszgoogle*)Zunitsr N)Zadd_cmd_outputZ add_journal)r r r r setup/ s z GCP.setupc C s | j ddgdd}y,| j | _| j |jtj| jdd W n0 tk
rn } z|jt| W Y d d }~X nX W d Q R X d}| j j
j d}|r| j | d S )Nz
metadata.jsonr )r )indentzAcurl -v --connect-timeout 10https://rhui.googlecloud.com/zone.txtzgoogle-rhui-client)
Zcollection_file get_metadatametadatascrub_metadatawritejsondumps RuntimeErrorstrZpolicyZpackage_managerZall_pkgs_by_name_regexZcollect_cmd_output)r ZmfileerrZ curl_commandZ rhui_packager r r collect< s
*z GCP.collect)returnc C s | j | j}tj|S )zq
Retrieves metadata from the Metadata Server and transforms it into a
dictionary object.
)_query_addressMETADATA_QUERYr loads)r Z
response_bodyr r r r O s zGCP.get_metadata)urlr# c C s y\t j|ddid}t j|6}|jdkrHtd|j d|j j |j j S Q R X W n4 tk
r } ztdt| |W Y dd}~X nX dS ) zf
Query the given url address with headers required by Google Metadata
Server.
zMetadata-FlavorZGoogle)Zheaders z2Failed to communicate with Metadata Server (code: z): Nz,Failed to communicate with Metadata Server: ) r ZRequestZurlopencoder r decoder r )r r' ZreqZresponser! r r r r$ W s
zGCP._query_addressc s j drdS jd d jd d tttd fdd j_jjd d d
jjd d d dS ) a"
Remove all PII information from metadata, unless a keep-pii option
is specified.
Note: PII information collected by this plugin, like
project number, account names etc. might be required by Google
Cloud Support for faster issue resolution.
zkeep-piiNZprojectZ projectIdZnumericProjectId)datar# c s t | tr2d| kr j| d< fdd| j D S t | trNfdd| D S t | trp| jjj jS t | tr| krjS | S | S )Ntokenc s i | ]\}} | |qS r r ).0kv)scrubr r
s z5GCP.scrub_metadata..scrub..c s g | ] } |qS r r )r- value)r0 r r
s z5GCP.scrub_metadata..scrub..)
isinstancedictREDACTEDitemslistr replaceint)r+ )
project_idproject_numberproject_number_intr0 r r r r0 z s
z!GCP.scrub_metadata..scrubZ
attributeszssh-keysZsshKeys)Z
get_optionr r r safe_redact_key)r r )r; r< r= r0 r r r j s
zGCP.scrub_metadata)dict_objkeyc C s ||kr| j ||< dS )z
Redact keys N)r6 )clsr? r@ r r r r> s zGCP.safe_redact_key)r
)__name__
__module__ __qualname__Z
short_descZ plugin_nameZprofilesr Z option_listr r% r6 r r r r" r5 r r r$ r classmethodr> r r r r r s"
'r ) r Ztypingr Zurllibr Z urllib.errorr Zsos.report.pluginsr r r r r r r r s